ESXi:定壳交互超时

资讯类

设置超时自动终止闲置ESXishell和SSH会话
用户忘记退出SSH会议时闲置连接将无限期开放,增加个人访问主机特权的可能性ESXishell交互时间输出允许自动终止闲置shell解析

http://pubs.vmware.com/vsphere-60/topic/com.vmware.vsphere.security.doc/GUID-94F0C54F-05E3-4E16-8027-0280B9ED1009.html

http://kb.vmware.com/kb/2004746

求解

设置用户VARs.ESXishell交互时间输出900
Get-VMHost+Foreach+Set-VMHost高级配置-VMHost$-

并见

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/files/xls/vSphere_6_0_Hardening_Guide_GA_15_Jun_2015.xls

项目细节

审核名称 :VMWARE vSphere6.0硬化指南

类别 :失序控制

引用 :800-53AC-12

插件 :VMware

控件标识符 :5984ba9dc9150e1a88bd09bdc87e014a014a7456a0430fba5dd66b00c483d6c0